Open source on

Octo STS

Sat, 20 Dec 2025 08:49:15 +0000

Octo STS is an open source GitHub App, developed by Chainguard, that acts as a security token service for the GitHub API. It exchanges OIDC tokens from your workloads for short-lived GitHub tokens, so your automation doesn’t need long-lived personal access tokens (PATs).

To learn why PATs are risky and how Octo STS replaces them, read Octo STS: Short-lived GitHub tokens without PATs in Supply Chain Security 101. To install and configure it, follow Set up and use Octo STS.

Build tools

Thu, 02 May 2024 08:49:15 +0000

The open source tools that were developed for the Wolfi operating system.

SBOMs

Thu, 26 Jan 2023 08:49:15 +0000

A software bill of materials, or an SBOM (pronounced s-bomb), is a key resource for enabling visibility into the different software components of a codebase.

Wolfi

Mon, 05 Sep 2022 08:49:15 +0000

Wolfi is a Linux undistro built for containers. It uses the apk package format, builds every package from source, and relies on the container runtime to provide the kernel. Chainguard Containers are built on Wolfi.

To learn what Wolfi is and why Chainguard built it, read What is Wolfi? in Supply Chain Security 101. The pages in this section show you how to work with Wolfi.

Try Wolfi

To explore Wolfi, run the wolfi-base image. It’s intentionally minimal: it contains the Wolfi filesystem, the apk package manager, and a shell.

Sigstore

Tue, 06 Oct 2020 08:49:15 +0000